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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims : 

1-6. (Cancelled) 

7. (Currently Amended) A method for allowing a client application (16) to 
establish, in a client network"(+©), a first comiection having a first security level, dir e ctly 
with a first port (4^of a server application f4-7)-hosted in a server machine f4-3)-linked to a 
server network-(4-4-), in order to send messages (^0)-addressed to the server machine-fl-3), 
said messages (50)-passing from the client network ( 1 0) to the server network (++) 
through a network layer (CR) of a gateway machine-f9), characterized in that it 
comprises comprising : 

[[- ]]creating a second port (^in the gateway machine-(9); 

[[- ]]ordering the network layer (CR) of the gateway machine (9)-to reroute to the 
second port f^ ^f the gateway machine any message sent to the first port-(4 4 of the server 
application , addressed to the server machine-(4^; 

[[- ]]listening to the second port 0^ of the gateway machine to detect a request to 
establish said first connection with the first port of the server application and; 

[[- ]]generating, in the gateway machine-(9), a thread for establishing said first 
connection when a request to establish said first connection is detected in the second port 
of the gateway machine . 
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8. (Currently Amended) A method according to claim 7, further comprising: 
[[- ]]defming a third port (3) of the server application ( 1 7) for receiving at least 

one of the messages (30) with a second security level; and whereas said thread comprises; 

[[- ]]establishing said first connection in a first phase with a first security level in a 
first interface associated with the second port (^and with said request; 

[[" ]]establishing in a second phase a second connection with a second level of 
security in a second interface to the third port (2)-in the server machine-fl-3); 

[[- ]]writing with the second security level in the second interface any message 
read in the first interface with the first security level in a third phase, and; 

[[- ]]writing with the first security level in the first interface any message read in 
the second interface with the second security level in a fourth phase. 

9. (Currently Amended) A method according to claim 8, charact e rized in that it 
comprises further comprising : 

[[- ]]ordering the network layer (CR) of the gateway machine {9)-to delete any 
message sent to the third port-(3). 

10. (Currently Amended) A method according to claim 7, charact e rized in that 
wherein the steps of creating and ordering are executed automatically by a first process of 
the gateway machine (9)-and in that said first process generates a second process that 
executes the third and the fourth step. 

1 1 . (Currently Amended) A method according to claim 8, charact e rized in that 
wherein the steps of creating and ordering are executed automatically by a first process of 
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the gateway machine {9)-and in that said first process generates a second process that 
executes the third and the fourth step. 

12. (Currently Amended) A method according to claim 10, further comprising 
automatically executing the steps of creating, rerouting and deleting by a first process of 
the gateway machine (9^and generating by said first process a second process that 
executes the steps of listening and generating a thread. 

13. (Currently Amended) A method according to claim 1 1, further comprising 
automatically executing the steps of creating, rerouting and deleting by a first process of 
the gateway machine (9)-and generating by said first process a second process that 
executes the steps of listening and generating a thread. 

14. (Currently Amended) A method for allowing a client application f+4)-to 
establish in a client network (10) a first connection having a first security level, directly 
with a first port ft)-of a server applicafion (17) hosted in a server machine f+^linked to a 
server network-f}4), in order to send messages (^0)-addressed to the server machine-(4^, 
said messages f30)-passing from the client network ( 1 0) to the server network f44^ 
through a network layer (CR) of a gateway machine-(9), characterized in that it consists 
of activating, in the gateway machine, a secure application proxy that reroutes the 
messages from the first connection, in a way that is transparent for the client application, 
in order to establish a second connection having a second security level with the server 
application, said second connection being unknown to said client application. 
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